$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft File: rjnJrCEn_qcOoyYOwW0giDxVdfU.mft (raw, json) Hash identifier: Z9Z9g9xeesgyD+6l/eFehDAoJivN9q4w+dAw5GBDKCE= Subject key identifier: D4:37:CE:3B:BA:32:63:07:08:3C:AB:EF:1F:A3:A2:20:7E:88:2F:CF Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5 Certificate issuer: /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft Manifest number: 2A Signing time: Sun 05 Apr 2026 08:08:40 +0000 Manifest this update: Sun 05 Apr 2026 08:08:40 +0000 Manifest next update: Sun 12 Apr 2026 08:08:40 +0000 Files and hashes: 1: rjnJrCEn_qcOoyYOwW0giDxVdfU.crl (hash: 1AhnvruiHLtD4AtuLlhjXNfju0o5z6L4Cx8Wh+5lGUI=) 2: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (hash: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=) 3: 846CC09CFDD011F0A25053256C6F56BC.roa (hash: 7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=) 4: 29B85B52FDD011F0BDC391246C6F56BC.roa (hash: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5 Validity Not Before: Apr 5 08:08:40 2026 GMT Not After : Apr 12 08:08:40 2026 GMT Subject: CN=69d21888-3c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e4:03:fe:8b:2f:b9:c2:d7:2d:67:d3:ba:04: 20:10:86:ef:44:8b:3d:08:24:00:e2:16:25:de:87: 83:52:e8:f0:5f:d9:de:b2:7c:f4:a4:a7:8f:3e:5e: 2b:79:de:17:d9:58:60:24:3a:58:67:43:cb:0f:48: 81:32:de:d0:f3:3a:b4:db:e2:f5:a8:b5:44:d4:79: c9:77:88:bb:a3:ff:db:b9:2f:56:88:b7:ea:de:cb: 47:5e:87:ca:56:9f:ce:b0:f7:02:31:ad:20:cc:b1: 1a:06:61:93:a1:ce:f7:17:32:a7:15:f9:ca:81:6d: fd:c8:26:51:ce:73:f2:e8:4d:5e:a7:96:f7:d7:c2: df:f3:aa:4b:16:dd:aa:ed:cb:49:58:a8:be:a2:72: e6:24:ed:73:cb:d3:1b:a8:68:40:05:f3:bf:79:0c: 09:51:af:d8:ae:7b:ef:76:97:e1:cc:01:2a:4a:53: b4:4e:8d:f4:9b:52:58:e6:d7:cc:a4:71:a6:7b:a2: 95:1d:f5:95:a0:03:97:7b:31:e0:17:fb:c1:c7:3c: 6c:73:9e:69:d1:cc:d7:28:d9:50:b0:82:a8:81:88: 7b:12:76:d3:a4:dc:ac:ce:bf:69:99:21:90:53:0f: f3:c7:09:ca:68:0a:25:c5:f5:bf:b2:f9:51:75:2c: 4b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:37:CE:3B:BA:32:63:07:08:3C:AB:EF:1F:A3:A2:20:7E:88:2F:CF X509v3 Authority Key Identifier: keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:87:0b:5a:2a:d3:39:99:5b:82:76:04:ff:49:82:b7:16:05: 76:e1:8b:46:c9:d0:ba:19:b1:86:b1:ca:e0:d1:8c:2e:8f:1f: 2e:92:35:7e:fb:27:86:db:d1:c1:ec:d8:e5:14:7f:6c:17:75: fc:e5:af:be:ce:3a:80:a5:f9:ce:50:58:bb:62:7e:8a:ce:46: 80:5d:81:80:49:da:bf:6f:3e:99:44:9e:2b:14:5d:22:2a:77: fd:dc:fc:5b:13:fa:4f:3c:a2:96:28:7e:9e:31:c1:16:d4:7b: e9:a5:40:d0:8c:b5:81:52:60:37:33:42:b7:4d:e3:e3:c2:a9: 38:51:72:7b:7a:2b:ce:41:b4:c3:ef:85:57:45:c5:90:33:6a: 42:9e:fc:6f:d9:bf:e1:ed:85:53:51:e8:25:34:d2:70:5d:04: 2a:aa:a6:81:67:60:d3:06:51:ab:2c:38:1c:d6:8f:93:bf:33: 27:ab:9c:73:72:74:1e:81:7f:fb:3d:08:c8:8a:43:08:de:55: e6:66:d2:33:b0:e7:e8:fc:20:d5:f7:53:ed:f3:7e:c5:9c:8f: 25:0e:7c:ad:b4:02:27:ee:da:50:70:b7:61:91:1d:68:15:92: 86:a9:2f:25:6a:e0:83:39:0d:83:2a:a6:3a:d5:19:39:ad:0d: 57:23:06:0b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QThDMzExMC8GA1UEBRMoQUUzOUM5QUMyMTI3RkVBNzBFQTMyNjBFQzE2RDIwODgz QzU1NzVGNTAeFw0yNjA0MDUwODA4NDBaFw0yNjA0MTIwODA4NDBaMBgxFjAUBgNV BAMTDTY5ZDIxODg4LTNjNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDY5AP+iy+5wtctZ9O6BCAQhu9Eiz0IJADiFiXeh4NS6PBf2d6yfPSkp48+Xit5 3hfZWGAkOlhnQ8sPSIEy3tDzOrTb4vWotUTUecl3iLuj/9u5L1aIt+rey0deh8pW n86w9wIxrSDMsRoGYZOhzvcXMqcV+cqBbf3IJlHOc/LoTV6nlvfXwt/zqksW3art y0lYqL6icuYk7XPL0xuoaEAF8795DAlRr9iue+92l+HMASpKU7ROjfSbUljm18yk caZ7opUd9ZWgA5d7MeAX+8HHPGxznmnRzNco2VCwgqiBiHsSdtOk3KzOv2mZIZBT D/PHCcpoCiXF9b+y+VF1LEuRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1DfOO7oy YwcIPKvvH6OiIH6IL88wHwYDVR0jBBgwFoAUrjnJrCEn/qcOoyYOwW0giDxVdfUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBOEMzL0ZGOTQ3Qzg0RkRD RjExRjA4QUZDNTAwMTZDNkY1NkJDL3JqbkpyQ0VuX3FjT295WU93VzBnaUR4VmRm VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvcmpuSnJDRW5fcWNPb3lZT3dXMGdpRHhWZGZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB OEMzL0ZGOTQ3Qzg0RkRDRjExRjA4QUZDNTAwMTZDNkY1NkJDL3JqbkpyQ0VuX3Fj T295WU93VzBnaUR4VmRmVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBDhwtaKtM5mVuCdgT/SYK3FgV24YtGydC6GbGGscrg0Ywujx8ukjV++yeG29HB 7NjlFH9sF3X85a++zjqApfnOUFi7Yn6KzkaAXYGASdq/bz6ZRJ4rFF0iKnf93Pxb E/pPPKKWKH6eMcEW1HvppUDQjLWBUmA3M0K3TePjwqk4UXJ7eivOQbTD74VXRcWQ M2pCnvxv2b/h7YVTUeglNNJwXQQqqqaBZ2DTBlGrLDgc1o+TvzMnq5xzcnQegX/7 PQjIikMI3lXmZtIzsOfo/CDV91Pt837FnI8lDnyttAIn7tpQcLdhkR1oFZKGqS8l auCDOQ2DKqY61Rk5rQ1XIwYL -----END CERTIFICATE-----Generated at Mon Apr 6 15:15:56 2026 by rpki-client